Re: Loopback security...

["Leonardo Rodrigues Magalhães" <leolistas@solutti.com.br>]

Pascal Hambourg escreveu:
> Petr Pisar a écrit :
>>
>> No. Loopback interface is just another dummy interface to be able to
>> assign node scope adresses from 127.0.0.0/8 block. The reason for
>> loopback is somobedy wants to have (node scoped) IP socket on machine 
>> with
>> no real interfaces. It's just a historical relict because IP address
>> needs an interface in Linux.
>
> I disagree. The loopback interface is very different from a dummy 
> interface. A dummy interface is just a black hole, it cannot do what 
> the loopback interface does. The loopback interface loops the traffic 
> back to the host and the kernel knows about it, this is what makes it 
> unique.
>
>> E.g. I know about people running IPv6 networks where each router has
>> globally routable addresses on loopaback interface, real ethernet
>> interfaces between routers have only link scope addresses and a
>> dynamic routing protocol (e.g, OSPF) is used to solve routing via
>> network. And of course it works.
>
> So what ? You can do the same with IPv4 and it will work too, at least 
> on Linux.

    This thread has gone faaar beyond what's supposed to be this mailing 
list purpose in my opinion. Seem it's time to accept the fact that 
loopback interface in linux is NOT a normal interface and, thus, cannot 
be used for things 'normal' interfaces are used. It's time to accept, as 
well, that routers, as well as all other non-linux OSs, can have another 
approach on their loopback interfaces.

   

-- 


	Atenciosamente / Sincerily,
	Leonardo Rodrigues
	Solutti Tecnologia
	http://www.solutti.com.br

	Minha armadilha de SPAM, NÃO mandem email
	gertrudes@solutti.com.br
	My SPAMTRAP, do not email it